CVE-2018-4407
HIGH 8.8EPSS 21.2%
A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
- Affected
- iOS, macOS, tvOS, watchOS
- CVSS v3.0 NVD
- 8.8 HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P - EPSS
- 21.22% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2019-04-03
- Updated
- 2024-08-05
Proof-of-concept exploits (17)
- 5431/CVE-2018-44070★ · 2019-04-28
- 649/Crash-iOS-Exploit42★ · 2018-11-13
- C-starm/PoC-and-Exp-of-Vulnerabilities0★ · 2019-01-06
- Fans0n-Fan/CVE-2018-44070★ · 2020-08-24
- SamDecrock/node-cve-2018-440710★ · 2018-11-02
- WyAtu/CVE-2018-440713★ · 2019-02-23
- ZardashtKaya/Apple-ICMP-Buffer-Overflow-Automation-PoC1★ · 2019-07-02
- anonymouz4/Apple-Remote-Crash-Tool-CVE-2018-44074★ · 2019-01-17
- farisv/AppleDOS25★ · 2018-12-04
- ktiOSz/PoC-iOS-11.4.19★ · 2018-11-01
- lucagiovagnoli/CVE-2018-44071★ · 2018-11-04
- pwnhacker0x18/iOS-Kernel-Crash6★ · 2020-04-01
- r3dxpl0it/CVE-2018-440735★ · 2018-11-04
- szabo-tibor/CVE-2018-44070★ · 2024-04-10
- unixpickle/cve-2018-440746★ · 2018-11-15
- zeng9t/CVE-2018-4407-iOS-exploit2★ · 2018-12-31
- zteeed/CVE-2018-4407-IOS14★ · 2024-02-25
Exploit collections (1)
- apple/darwin-xnu/icmp_error_CVE-2018-4407github/securitylab
Security advisories
- https://support.apple.com/kb/HT209106
- https://support.apple.com/kb/HT209107
- https://support.apple.com/kb/HT209108
- https://support.apple.com/kb/HT209139
- https://support.apple.com/kb/HT209193